NODE 9c949c05Re: OTP server..
unicorn@polaris.mindport.net (Black Unicorn)Thu, 13 Jul 95 17:15:55 PDT
-----BEGIN PGP SIGNED MESSAGE-----
>How about WWW one time pad servers? You browse to your
>favorite OTP server, which has a random number generator
>running in the background. You tell it to give you a block
>of X bytes, and mail it to persons 1, 2, 3, ... N.
>
>These people then use this OTP for encrypting a document.
>It wouldn't be illegal because you aren't encoding any data
>and distributing it.. You're generating raw data. You wouldn't
>have to distribute any crypto software, you just xor your
>data file with the number of bytes that you were sent
>in the mail from the OTP server.. Enough of these things
>would be REALLY tough to monitor.. Plus, you could connect
>8 different times and just pick one of the sets.. Or you
>could just use a portion of the set that you and the receiving
>party agreed upon.
>
>Or, instead of using email, you could have a application/x-otp
>browser that would collect the OTP that the server sent out
>to you over HTTP. (this would be really hard to differentiate
>from other data if the server was doing other things at the
>same time).
>
>Thoughts?
>
I think you're trusting the server a GREAT deal.
> Doug Hughes Engineering Network Services
> doug@eng.auburn.edu Auburn University
-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
iQEVAwUBMAcXby1onm9OaF05AQEUpggApWiVdcA4UAsVIXKEor3JnM6PkEZleO6b
CpbyXYVZNRmUuePTuUMf9KQkI0accFm/sjnc7t12Hujs60utILWYM2F71GSrHZ0/
POx/oExL5TgcR9m6e0cYM58k9xZT2golXXHukTXnU6FlCNSNMfWnBziTgsSwCj1q
mZO8xQnbSWteWL50g7cFBMvGbyDSygOZu9MPqzRRvUVoF/kL78G0SAwT8HzGadfk
yIV40wDicBfuPH1GcaPlbGW+0Adips0WHAETBSRmUXSBdu+uQcs6LhEhddvbKmzF
Rh4qpIR0FYKcnyax0kqk6eBBWqo7oVCdm9nYMHc2yg6I9dQLGWnQIA==
=b9lf
-----END PGP SIGNATURE-----
NODE 280c06e2Re: OTP server..
Andy Brown <asb@nexor.co.uk>Fri, 14 Jul 95 02:14:49 PDT
On Fri, 14 Jul 1995, Black Unicorn wrote:
> doug@eng.auburn.edu wrote:
>> How about WWW one time pad servers? You browse to your
>> favorite OTP server, which has a random number generator
>> running in the background. You tell it to give you a block
>> of X bytes, and mail it to persons 1, 2, 3, ... N.
>> [...]
>> Thoughts?
>>
> I think you're trusting the server a GREAT deal.
A small addition to the protocol whereby the recipient gives the random
data the once-over with a personal IDEA key would be sufficient to
eliminate any doubts about the server.
- Andy
+-------------------------------------------------------------------------+
| Andrew Brown Internet <asb@nexor.co.uk> Telephone +44 115 952 0585 |
| PGP (2048/9611055D): 69 AA EF 72 80 7A 63 3A C0 1F 9F 66 64 02 4C 88 |
+-------------------------------------------------------------------------+
NODE da9b0946Re: OTP server..
"Ed Carp [khijol Sysadmin]" <erc@khijol.intele.net>Thu, 13 Jul 95 17:45:41 PDT
On Fri, 14 Jul 1995, Black Unicorn wrote:
> >How about WWW one time pad servers? You browse to your
> >favorite OTP server, which has a random number generator
> >running in the background. You tell it to give you a block
> >of X bytes, and mail it to persons 1, 2, 3, ... N.
>
> I think you're trusting the server a GREAT deal.
Why is that? The randomness of the data can be easily checked...
--
Ed Carp, N7EKG Ed.Carp@linux.org, ecarp@netcom.com
801/534-8857 voicemail 801/460-1883 digital pager
Finger ecarp@netcom.com for PGP 2.5 public key an88744@anon.penet.fi
Q. What's the trouble with writing an MS-DOS program to emulate Clinton?
A. Figuring out what to do with the other 639K of memory.
NODE 9264907bRe: OTP server..
"Rev. Ben" <samman@CS.YALE.EDU>Fri, 14 Jul 95 06:53:15 PDT
On Thu, 13 Jul 1995, Ed Carp [khijol Sysadmin] wrote:
> On Fri, 14 Jul 1995, Black Unicorn wrote:
>
> > >How about WWW one time pad servers? You browse to your
> > >favorite OTP server, which has a random number generator
> > >running in the background. You tell it to give you a block
> > >of X bytes, and mail it to persons 1, 2, 3, ... N.
> >
> > I think you're trusting the server a GREAT deal.
>
> Why is that? The randomness of the data can be easily checked...
Because if the server is compromised to KEEP the data that it mails to
you and those other people, you can have a PERFECTLY random OTP, and
because of the particulars of XOR, your communication has been compromised.
Ben.
____
Ben Samman..............................................samman@cs.yale.edu
I have learned silence from the talkative, toleration from the intolerant,
and kindness from the unkind; yet, strange, I am ungrateful to those
teachers.-- K. Gibran. SUPPORT THE PHIL ZIMMERMANN LEGAL DEFENSE FUND!
For information Email: zldf@clark.net http://www.netresponse.com/zldf